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[I / We] claim: 

1 . A port blocking method for securing data comprising: 

a port request detection step of detecting a port request for use of a port sent by a 
5 process; 

a process identification step of determining the identity of said requesting process; 
a process check step of determining if said process should be permitted to access said 
port; and 

a permit/deny step of allowing said port request to be fiilfilled if said process should be 
10 permitted to access said port and denying said port request if said process should not be 
permitted to access said port. 

D 2. The method of claim 1 where said process check step comprises: 

□ a secure process list check step of determining whether said process appears on a list of 

J2 1 5 secure processes . 

3. A port blocking method for securing data comprising: 
2 a port request detection step of detecting a port request for use of a port sent by a 

t ~ process; 

!3 20 an open port process identification step of, if said port request is an open port request, 

determining the identity of said requesting process; 

an open port process check step of, if said port request is an open port request, 
determining if said process should be permitted to open said port; 

an open port permit/deny step of, if said port request is an open port request, allowing 
25 said open port request to be fulfilled and tracking said open port request if said process should 
be permitted to open said port and denying said port request if said process should not be 
permitted to open said port; 

a close port process completion step of, if said port request is a close port request, 
completing said port request; and 
30 a close port logging step of, if said port request is a close port request, logging the 

closing of said port. 



5 



WO 01/25925 



PCT/US00/26839 



4. The method of claim 3 where said open port process check step comprises: 

a secure process list check step of determining whether said process appears on a list of 
secure processes. 

5 5. The method of claim 3 where said tracking of said open port request comprises 

keeping a log of process ID and returned port handle for said open port request, and said close 
port logging step of tracking the closing of said port comprises removing from said log said 
record of process ID and returned port handle for that port close request. 

10 6. The method of claim 5 further comprising: 

a security check step comprising the steps of checking whether a process has open 
ports, and denying security clearance for a process with open ports, and allowing security 
,y clearance for a process with no open ports. 

HJ15 7. The method of claim 6 where said open port process check step of comprises 

m determining if said process identity appears on a secured process list, and where said step of 

allowing security clearance for a process with no open ports comprises the step of placing said 
j ~ process on said secured process list. 

; ^20 8. A port blocking system wherein said port blocking system operates to detect a port 
U request for use of a port sent by a process; determine the identity of said requesting process; 
determine if said process should be permitted to access said port; and allow said port request 
to be fulfilled if said process should be permitted to access said port and deny said port request 
if said process should not be permitted to access said port. 

25 

9. A port blocking system wherein said port blocking system operates to detect a port request 
for use of a port sent by a process; if said port request is an open port request, determine the 
identity of said requesting process; if said port request is an open port request, determine if 
said process should be permitted to open said port; if said port request is an open port request, 
30 allow said open port request to be fulfilled, track said open port request if said process should 

♦ 

be permitted to open said port, and deny said port request if said process should not be 
permitted to open said port; if said port request is a close port request, complete said port 
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request; and if said port request is a close port request, log the closing of said port. 

10. A secured data transmission system having a port blocking system which operates to 
detect a port request for use of a port sent by a process; determine the identity of said 

5 requesting process; determine if said process should be permitted to access said port; and 
allow said port request to be fulfilled if said process should be permitted to access said port 
and deny said port request if said process should not be permitted to access said port. 

11. A secured data transmission system having a port blocking system which operates to 
10 detect a port request for use of a port sent by a process; if said port request is an open port 

request, determine the identity of said requesting process; if said port request is an open port 
request, determine if said process should be permitted to open said port; if said port request is 
an open port request, allow said open port request to be fulfilled, track said open port request 
if said process should be permitted to open said port, and deny said port request if said process 
15 should not be permitted to open said port; if said port request is a close port request, complete 
said port request; and if said port request is a close port request, log the closing of said port. 

12. A computer comprising a communications port and configured to protect secure data 
by including a port blocking system which operates to detect a port request for use of a port 

20 sent by a process; determine the identity of said requesting process; determine if said process 
should be permitted to access said port; and allow said port request to be fulfilled if said 
process should be permitted to access said port and deny said port request if said process 
should not be permitted to access said port. 

25 13. A computer comprising a communications port and configured to protect secure data 
by including a port blocking system which operates to detect a port request for use of a port 
sent by a process; if said port request is an open port request, determine the identity of said 
requesting process; if said port request is an open port request, determine if said process 
should be permitted to open said port; if said port request is an open port request, allow said 

30 open port request to be fulfilled, track said open port request if said process should be 

permitted to open said port, and deny said port request if said process should not be permitted 
to open said port; if said port request is a close port request, complete said port request; and if 
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said port request is a close port request, log the closing of said port. 

14. A computer-readable medium programmed to protect secure data by implementing a 
port blocking system which operates to detect a port request for use of a port sent by a 
5 process; determine the identity of said requesting process; determine if said process should be 
permitted to access said port; and allow said port request to be fulfilled if said process should 
be permitted to access said port and deny said port request if said process should not be 
permitted to access said port. 

10 15. A computer-readable medium programmed to protect secure data by implementing a 
port blocking system which operates to operates to detect a port request for use of a port sent 
by a process; if said port request is an open port request, determine the identity of said 
requesting process; if said port request is an open port request, determine if said process 
should be permitted to open said port; if said port request is an open port request, allow said 

15 open port request to be fulfilled, track said open port request if said process should be 

permitted to open said port, and deny said port request if said process should not be permitted 
to open said port; if said port request is a close port request, complete said port request; and if 
said port request is a close port request, log the closing of said port. 
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